Policy: AWSPanoramaFullAccess ARN: arn:aws:iam::aws:policy/AWSPanoramaFullAccess Allowed Actions Actions Services cloudwatch:GetMetricData cloudwatch cloudwatch:GetMetricStatistics cloudwatch cloudwatch:ListMetrics cloudwatch iam:CreateServiceLinkedRole iam iam:ListRoles iam iam:PassRole iam logs:Describe* logs logs:DescribeLogGroups logs logs:FilterLogEvents logs logs:Get* logs logs:List* logs logs:StartQuery logs logs:StopQuery logs logs:TestMetricFilter logs panorama:* panorama s3:DeleteObject s3 s3:GetObject s3 s3:ListBucket s3 s3:PutObject s3 s3:PutObjectAcl s3 secretsmanager:DescribeSecret secretsmanager secretsmanager:GetSecretValue secretsmanager secretsmanager:ListSecretVersionIds secretsmanager secretsmanager:PutSecretValue secretsmanager secretsmanager:UpdateSecret secretsmanager